Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/DyItXMgxBIDpyZKSUziDsIhk-N0.roa
File: DyItXMgxBIDpyZKSUziDsIhk-N0.roa (raw, json)
Hash identifier: qCNvg2gxn4mmgcUXgyj4oNy3c+VUgV902x9R3xabevk=
Subject key identifier: 0F:22:2D:5C:C8:31:04:80:E9:C9:92:92:53:38:83:B0:88:64:F8:DD
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1474B8AA
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/DyItXMgxBIDpyZKSUziDsIhk-N0.roa
Signing time: Sat 01 Jan 2022 03:59:00 +0000
ROA not before: Sat 01 Jan 2022 03:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36057
IP address blocks: 85.92.152.0/21 maxlen: 21
89.18.160.0/24 maxlen: 24
89.18.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343193770 (0x1474b8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f222d5cc8310480e9c99292533883b08864f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:1f:c1:32:10:0a:32:0c:65:2a:9c:e5:01:
33:8f:79:d0:72:cc:99:f6:05:f0:6e:cb:28:8d:1b:
50:62:6c:59:15:fe:2a:d0:c1:7f:5e:1e:3f:f0:47:
3c:d8:ec:01:69:d6:d7:ca:26:c1:b3:08:5d:90:af:
cb:fd:c1:5d:b2:b2:01:4a:a4:68:9f:fa:7b:8a:16:
b9:21:aa:99:59:3c:d5:cf:81:92:91:b3:d0:69:e6:
34:9e:43:7a:8f:74:d4:d2:f1:d1:0f:68:24:15:46:
40:57:af:34:ee:35:1e:c4:08:b3:a9:0e:fc:07:28:
5e:e8:a1:21:18:dd:e4:1c:cd:93:41:cd:60:a8:77:
6f:ef:4d:21:fd:02:14:ca:af:36:30:8a:2d:41:0a:
d5:a8:e8:34:1f:61:e5:f9:7f:e3:82:b9:a0:9c:cc:
46:30:52:e4:69:dc:9d:d4:da:b0:1c:f6:ad:00:31:
e2:88:bf:1b:b0:25:8d:4a:fa:7b:c4:bd:c6:51:c7:
48:ff:ed:40:2d:96:e3:30:af:67:a1:a7:9a:d7:8d:
50:1f:cd:24:41:68:ae:8f:55:d2:65:7b:bb:2e:83:
4e:12:31:2f:67:41:b4:d5:4c:54:9d:de:bf:b6:ec:
ad:a5:9b:3d:86:49:fc:a4:c0:8f:12:7d:18:9d:07:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:2D:5C:C8:31:04:80:E9:C9:92:92:53:38:83:B0:88:64:F8:DD
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/DyItXMgxBIDpyZKSUziDsIhk-N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.152.0/21
89.18.160.0/24
89.18.184.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:76:1e:88:8d:7a:14:b5:a0:a3:ef:b2:0b:a6:fa:f5:bb:69:
f9:07:e7:28:3a:a5:57:24:2a:fb:83:d3:86:54:b6:65:00:cd:
14:f1:3d:a9:ae:5c:fb:7a:ae:4f:9b:6b:f4:7b:ff:ad:aa:2b:
b4:51:35:d4:43:bf:45:88:cc:6a:9f:fb:2f:7e:0f:72:38:66:
e5:9a:1b:c6:52:fc:52:ad:d0:3f:fa:10:06:ce:7e:e0:d7:c9:
e4:d2:f5:a6:43:47:54:f9:49:59:50:b5:44:58:bb:1f:a1:43:
1f:49:00:39:4d:eb:c8:10:f1:17:31:00:7c:1c:31:fd:db:79:
c3:68:42:e7:a1:f7:6e:f5:5d:1f:f7:8e:fa:4a:c5:09:e9:ae:
a6:93:5d:18:ab:05:9f:85:cc:f1:8a:c6:de:4d:c3:38:a9:03:
f5:43:67:2e:92:54:f5:c9:5a:24:b5:03:08:73:3d:ef:33:02:
60:e9:5f:56:66:89:19:43:d3:39:e9:b8:b0:d2:3c:67:cb:d4:
40:8e:ce:3b:6b:e1:0a:ee:26:a1:4e:bc:ee:bf:d3:42:21:9a:
17:0b:1e:f3:56:1c:ee:d1:19:bb:bf:93:a0:77:8f:c4:74:fd:
2b:51:0a:e7:61:d7:19:1f:cb:3d:f3:be:f5:21:66:aa:9e:63:
6a:32:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org